The @zeronexcode/baileys npm package version 7.0.0-zeronex.8 contains malicious code that causes the user's WhatsApp account to automatically follow a hardcoded channel without user consent. This behavior triggers whenever a connection is opened and cannot be disabled by the user.